Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE ID Title CVSS Severity Published
CVE-2020-8482 ABB Device Library Wizard Information Disclosure Vulnerability — ABB Device Library Wizard CWE-922 7.8 High 2020-05-29
CVE-2019-5620 ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function — MicroSCADA Pro SYS600 CWE-306 9.8 - 2020-04-29
CVE-2020-8489 ABB System 800xA Inter process communication vulnerability - 800xA Information Management — 800xA Information Management CWE-264 7.8 High 2020-04-29
CVE-2020-8488 ABB System 800xA Inter process communication vulnerability - 800xA Batch Management — 800xA Batch Management CWE-264 7.8 High 2020-04-29
CVE-2020-8487 ABB System 800xA Inter process communication vulnerability - System 800xA Base — System 800xA Base CWE-264 6.6 Medium 2020-04-29
CVE-2020-8486 ABB System 800xA Inter process communication vulnerability - 800xA RNRP — 800xA RNRP CWE-264 6.6 Medium 2020-04-29
CVE-2020-8485 ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300 — 800xA for MOD300 CWE-264 7.8 High 2020-04-29
CVE-2020-8484 ABB System 800xA Inter process communication vulnerability - 800xA for DCI — 800xA for DCI CWE-264 7.8 High 2020-04-29
CVE-2020-8478 ABB System 800xA Inter process communication vulnerability — OPC Server for AC 800M CWE-264 5.3 Medium 2020-04-29
CVE-2020-8481 ABB Central Licensing System - Information disclosure — Central Licensing System CWE-200 9.8 Critical 2020-04-29
CVE-2020-8471 ABB Central Licensing System - Weak File Permissions — Central Licensing System CWE-275 7.8 High 2020-04-29
CVE-2020-8475 ABB Central Licensing System - Denial of Service Vulnerability — Central Licensing System CWE-20 5.3 Medium 2020-04-29
CVE-2020-8476 ABB Central Licensing System - Elevation of Privilege Vulnerability — Central Licensing System CWE-20 5.3 Medium 2020-04-29
CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection — Central Licensing System CWE-91 9.4 Critical 2020-04-29
CVE-2020-8473 ABB System 800xA Weak File Permissions - ABB System 800xA Base — System 800xA Base CWE-732 7.3 High 2020-04-28
CVE-2020-8472 ABB System 800xA Weak File Permissions - different products — OPC Server for AC 800M CWE-732 5.5 Medium 2020-04-28
CVE-2020-8477 ABB System 800xA Information Manager Remote Code Execution — System 800xA Information Manager CWE-79 8.8 High 2020-04-22
CVE-2019-19107 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure — TG/S 3.2 Telephone Gateway CWE-264 6.2 Medium 2020-04-22
CVE-2019-19106 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues — TG/S 3.2 Telephone Gateway CWE-264 9.1 Critical 2020-04-22
CVE-2019-19105 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials — TG/S 3.2 Telephone Gateway CWE-256 6.2 Medium 2020-04-22
CVE-2019-19104 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control — TG/S 3.2 Telephone Gateway CWE-287 9.1 Critical 2020-04-22
CVE-2020-8474 ABB System 800xA Weak Registry Permissions — System 800xA Base CWE-275 7.8 High 2020-04-22
CVE-2019-19002 ABB eSOMS X-XSS-Protection not enabled — eSOMS CWE-16 6.3 Medium 2020-04-02
CVE-2019-19001 eSOMS X-FrameOption — eSOMS CWE-16 6.5 Medium 2020-04-02
CVE-2019-19000 eSOMS Cachecontrol (Pragma) HTTP Header — eSOMS CWE-16 6.5 Medium 2020-04-02
CVE-2019-19097 ABB eSOMS: SSL medium strength Cipher Suites — eSOMS CWE-16 5.9 Medium 2020-04-02
CVE-2019-19096 ABB eSOMS: REDIS clear text credentials — eSOMS CWE-257 6.1 Medium 2020-04-02
CVE-2019-19095 ABB eSOMS: Stored XSS vulnerability — eSOMS CWE-20 5.4 Medium 2020-04-02
CVE-2019-19094 ABB eSOMS: SQL injection vulnerability — eSOMS CWE-89 7.6 High 2020-04-02
CVE-2019-19093 ABB eSOMS: Password complexity issue — eSOMS CWE-521 6.5 Medium 2020-04-02

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.